This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft File: DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft (raw, json) Hash identifier: oY73GigJOw14ijDw+O2VHc2p2HbD4+cZkFkoMFzFW1c= Subject key identifier: 39:99:27:4F:72:5F:6C:57:71:22:6B:D0:48:C1:BB:2C:3C:4C:03:31 Authority key identifier: DE:23:EE:57:18:0D:61:B3:92:DC:88:85:9F:E6:54:C7:A8:AC:F1:FF Certificate issuer: /CN=DE23EE57180D61B392DC88859FE654C7A8ACF1FF Certificate serial: 5DCDA9DF8E0799CEB156DCCDB39D79C232F149C9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft Manifest number: 01B1 Signing time: Fri 05 Dec 2025 19:21:42 +0000 Manifest this update: Fri 05 Dec 2025 19:16:42 +0000 Manifest next update: Tue 09 Dec 2025 02:33:42 +0000 Files and hashes: 1: 3130332e3139312e3137312e302f32342d3234203d3e20313439393333.roa (hash: kEwMr1mIRZGwTHrXfoM+k+XYrDWcsMsreXoEQMVJdUg=) 2: DE23EE57180D61B392DC88859FE654C7A8ACF1FF.crl (hash: x41f+56QOVZ2hv7infa+0Dubh+WboVgk4yW/b/3GFBg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.crl rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 02:33:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:cd:a9:df:8e:07:99:ce:b1:56:dc:cd:b3:9d:79:c2:32:f1:49:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE23EE57180D61B392DC88859FE654C7A8ACF1FF Validity Not Before: Dec 5 19:16:42 2025 GMT Not After : Dec 9 02:33:42 2025 GMT Subject: CN=3999274F725F6C5771226BD048C1BB2C3C4C0331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:df:2f:a5:af:2e:c7:60:e1:a0:4b:b7:52:92: ce:f4:30:68:bd:42:ef:2d:42:76:7b:a0:75:83:9a: cd:28:b3:89:78:d6:d5:5c:44:17:75:65:86:f4:bd: d7:d2:de:a5:c0:e8:20:7e:ad:a0:a2:23:70:58:d4: d9:97:d6:c5:4e:b1:60:90:ed:82:b4:57:ba:d0:c1: ff:b6:a4:fe:7c:e0:3f:95:bf:e8:1f:63:3d:f0:a4: 63:65:cd:0e:a5:b0:7c:21:ed:88:a7:89:57:7b:5e: 3b:ee:82:e1:eb:c4:6f:02:17:67:9a:da:b4:83:2c: 15:72:b1:01:a4:03:1d:0b:2e:88:48:16:0f:67:3c: 19:e4:e3:16:ce:5b:50:45:a8:0a:03:fa:51:1b:c5: 64:36:68:33:ac:2b:7b:b3:d7:41:4a:dc:5f:5b:fc: d4:88:da:82:40:95:c2:a5:71:f7:a5:46:fa:37:68: 17:45:99:a4:fe:48:42:a6:1a:fa:45:03:d2:f2:c5: 6c:1f:64:b4:b9:d4:09:e8:3c:a4:39:93:f9:03:15: ae:5f:9f:6f:75:dd:af:cd:47:09:f9:35:3d:65:54: 55:28:37:9e:95:69:97:a2:f1:c8:f1:75:5c:d7:f3: 55:74:23:db:19:ad:58:d4:08:02:2e:d5:c8:bf:23: 1c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:99:27:4F:72:5F:6C:57:71:22:6B:D0:48:C1:BB:2C:3C:4C:03:31 X509v3 Authority Key Identifier: keyid:DE:23:EE:57:18:0D:61:B3:92:DC:88:85:9F:E6:54:C7:A8:AC:F1:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:c8:8b:57:bd:f2:83:bb:c5:9b:ae:77:d7:0b:c8:e6:52:92: b3:4e:0f:70:2b:fa:f1:d8:f5:ea:d2:ea:98:32:f1:70:ef:ef: 51:8e:0d:1c:18:17:48:85:c8:d6:a6:f4:cf:9b:ed:0b:77:bb: d5:8d:e2:47:f7:f1:2a:7b:0e:a2:21:0b:b1:8e:7c:75:39:93: af:4e:50:4a:44:bc:73:ce:61:b1:97:8e:47:f5:9b:a0:c5:85: 03:5e:6a:2b:e4:f1:20:66:1b:40:e3:de:b4:04:de:89:ad:dd: a2:df:33:fa:a6:05:4e:78:e5:56:6e:c4:35:ba:14:b1:bd:86: 65:2f:0f:af:bd:b6:06:29:2b:cf:c5:61:7b:10:68:ed:59:4b: bd:8a:64:ce:3d:50:ae:78:8d:b3:60:97:bd:94:7e:68:18:8d: 67:09:d7:06:43:c0:da:90:0a:dd:bd:3c:38:8d:ab:4f:4d:9a: 91:8a:e4:e5:27:cb:c7:ec:f5:5c:82:4e:d8:36:d7:37:17:8a: a0:39:23:16:be:9a:25:8b:69:1e:b5:56:a1:ef:34:f3:80:4f: ca:b6:1d:97:d9:d1:04:06:1e:f9:30:e5:c0:c9:13:af:34:7a: 21:90:e8:b1:86:3a:a8:1d:05:b8:e0:2b:c5:76:a2:5a:a4:ad: 99:67:3a:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXc2p344Hmc6xVtzNs515wjLxSckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUyM0VFNTcxODBENjFCMzkyREM4ODg1OUZFNjU0QzdB OEFDRjFGRjAeFw0yNTEyMDUxOTE2NDJaFw0yNTEyMDkwMjMzNDJaMDMxMTAvBgNV BAMTKDM5OTkyNzRGNzI1RjZDNTc3MTIyNkJEMDQ4QzFCQjJDM0M0QzAzMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo3y+lry7HYOGgS7dSks70MGi9 Qu8tQnZ7oHWDms0os4l41tVcRBd1ZYb0vdfS3qXA6CB+raCiI3BY1NmX1sVOsWCQ 7YK0V7rQwf+2pP584D+Vv+gfYz3wpGNlzQ6lsHwh7YiniVd7XjvuguHrxG8CF2ea 2rSDLBVysQGkAx0LLohIFg9nPBnk4xbOW1BFqAoD+lEbxWQ2aDOsK3uz10FK3F9b /NSI2oJAlcKlcfelRvo3aBdFmaT+SEKmGvpFA9LyxWwfZLS51AnoPKQ5k/kDFa5f n2913a/NRwn5NT1lVFUoN56VaZei8cjxdVzX81V0I9sZrVjUCAIu1ci/IxwXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOZknT3JfbFdxImvQSMG7LDxMAzEwHwYDVR0j BBgwFoAU3iPuVxgNYbOS3IiFn+ZUx6is8f8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NWMxZTJmMy00ZmJkLTQ0YmItODNmMC1iYjVhZmU2NDU3NWUvMC9ERTIzRUU1NzE4 MEQ2MUIzOTJEQzg4ODU5RkU2NTRDN0E4QUNGMUZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREUyM0VFNTcxODBENjFCMzkyREM4ODg1OUZFNjU0QzdBOEFD RjFGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDVjMWUyZjMtNGZiZC00NGJiLTgz ZjAtYmI1YWZlNjQ1NzVlLzAvREUyM0VFNTcxODBENjFCMzkyREM4ODg1OUZFNjU0 QzdBOEFDRjFGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKfIi1e98oO7xZuud9cLyOZSkrNOD3Ar+vHY 9erS6pgy8XDv71GODRwYF0iFyNam9M+b7Qt3u9WN4kf38Sp7DqIhC7GOfHU5k69O UEpEvHPOYbGXjkf1m6DFhQNeaivk8SBmG0Dj3rQE3omt3aLfM/qmBU545VZuxDW6 FLG9hmUvD6+9tgYpK8/FYXsQaO1ZS72KZM49UK54jbNgl72UfmgYjWcJ1wZDwNqQ Ct29PDiNq09NmpGK5OUny8fs9VyCTtg21zcXiqA5Ixa+miWLaR61VqHvNPOAT8q2 HZfZ0QQGHvkw5cDJE680eiGQ6LGGOqgdBbjgK8V2olqkrZlnOpc= -----END CERTIFICATE-----Generated at Sun Dec 7 02:10:18 2025 by rpki-client